Re:Password Managers: Under the Hood of Secrets Management
by ubercow13 on Wednesday February 20, 2019 @10:52PM
(#19214382)
No, it just has to wait until you unlock your password manager once
[ Parent
| on HN ]
Re:Password Managers: Under the Hood of Secrets Management
by UnFleshedOne on Thursday February 21, 2019 @11:45AM
(#19218118)
Well yes, right now that is true. Without filesystem access, without long term persistence, just process memory access, a compromised browser can dump whole db from 1password7 at once. You only need seconds of time.
If only recently accessed passwords were unencrypted, only those would be available.